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(57) ABSTRACT 

A method and apparatus for managing dependencies in a 
distributed environment to ensure the safety of remote 
procedure calls is disclosed. Each remote procedure call 
between a calling procedure and a target procedure includes 
an expected time stamp and expected signature associated 
with the target procedure. The expected time stamp contains 
the creation time of the target procedure at the time the 
calling procedure was last compiled. The expected signature 
contains data type information of the target procedure for- 
mal parameters at the time the calling procedure was last 
compiled. ! ,: 1 

The target procedure compares the expected time stamp to 
an actual time stamp maintained by the target procedure /if 
the two time stamps do not match, the target procedure 
compares the expected signature and an actual signature 
maintained by the target procedure to determine whether the 
data types of the formal parameters sent by the calling 
procedure are compatible with the data types expected by 
the target procedure. If the data types are compatible, then 
execution of the target procedure continues. 

41 Claims, 6 Drawing Sheets 
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DOCUMENT- IDENTIFIER : US 6212578 Bl 

TITLE: Method and apparatus for managing dependencies in a distributed computing 
environment for ensuring the safety of remote procedure calls 



Brief Summary Text ( 7 ) : 

Historically, several approaches have been used to manage dependencies in 
distributed computing environments to ensure compatibility during remote procedure 
calls . Four of these include (1) synchronized installation; (2) time stamps; (3) 
self -describing data; and (4) data type encoding. 

Brief Summary Text (13) : 

Perhaps the most widely used approach for ensuring the safety of remote procedure 
calls in distributing computing environments is the use of self -describing data. 
With this approach, additional data is included in each remote procedure call which 
fully describes each parameter. This data typically includes type, mode, 
constraints, and any other meta-data required to fully describe the parameter and 
ensure correctness. 

Brief Summary Text (15) : 

However, the self -describing data approach adversely affects performance in two 
ways. First, the self -describing data greatly increases the amount of data being 
passed in each remote procedure call . Secondly, the data type information is 
typically interleaved with the parameters, requiring that all of the parameters be 
checked before compatibility can be confirmed. Consequently, a difference in the 
last parameter will not be detected until all of the other parameters have been 
checked. 
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ABSTRACT 



A monitor for and a method of examining packets passing 
through a connection point on a computer network. Each 
packets conforms to one or more protocols. The method 
includes receiving a packet from a packet acquisition device 
and performing one or more parsing/extraction operations 
on the packet to create a parser record comprising a function 
of selected portions of the packet. The parsing/extraction 
operations depend on one or more of the protocols to which 
the packet conforms. Hie method further includes looking 
up a flow-entry database containing flow-entries for previ- 
ously encountered conversational flows. The lookup uses the 
selected packet portions and determining if the packet is of 
an existing flow. If the packet is of an- existing flow, the 
method classifies the packet as belonging to the found 
existing flow, and if the packet is of a new flow, the method 
stores a new flow-entry for the new flow in. the flow-entry 
database, including identifying information for future pack-, 
ets to be identified with the new flow-entry. For the packet 
of an existing flow, the method updates the flow-entry of the 
existing flow. Such updating may include storing one or 
more statistical measures. Any stage of a flow, state is 
maintained, and the method performs any state processing 
for an identified state to further the process of identifying the 
flow. The method thus examines each and every packet 
passing through the connection point in real time until the 
application program associated with the conversational flow 
is determined. 

10 Claims, 18 Drawing Sheets 
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TITLE: Method and apparatus for monitoring traffic in a network 



Brief Summary Text (12): 

Other protocols that may lead to disjointed flows, include RPC (Remote Procedure 
Call ) ; DCOM (Distributed Component Object Model), formerly called Network ofiE"^ i ^ 
(Microsoft Corporation, Redmond, Wash.); and CORBA (Common Object Request Broker 
Architecture) . RPC is a programming interface from Sun Microsystems (Palo Alto, 
Calif.) that allows one program to use the services of another program in a lo 
remote machine. J3COM , Microsoft f s counterpart to CORBA, defines the remote 
procedure call that allows those objects — objects are self-contained software 
modules — to be run remotely over the network. And CORBA, a standard from the Object 
Management Group (OMG) for communicating between distributed objects, provides a 
way to execute programs (objects) written in different programming languages 
running on different platforms regardless of where they reside in a network. ,, r ^ ; 
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